|
|
I-Worm.Beglur. Viruses Information
| Name: |
I-Worm.Beglur. |
| Category: |
Viruses |
| Description:
|
Details
I-Worm.Beglur.a
This is a worm which spreads via the Internet as an attachment to infected emails. The worm itself is a Windows PE EXE file of approximately 8KB. The file is compressed using UPX and Yoda, and is approximately 27KB when uncompressed. It is written in Visual C++
Installation
The worm copies itself to the Windows system directory and registers the file in the SYSTEM.INI auto-run key in the [boot] section in the "shell" key:
shell=Explorer.exe bglr32.exe
Distribution via email
Infected messages contain the following text:
From:
Baath
Subject:
For World of Peace!
Message body:
Saddam Hussien has been captured but Osama Bin Laden still have a power and US will never captured this person until somebody captured Bush. God Bless You!!
The attached file is called
BGLR32.EXE
The worm uses the "IFRAME" breach to launch itself from infected messages. |
Top Viruses Visited Pages:
Invader. - 239 visits
not-a-virus:RiskWare.Tool.RegPatch. - 72 visits
Worm.P2P.Harex. - 66 visits
not-a-virus:RemoteAdmin.Win32.RAdmin.2 - 60 visits
Small.58. - 56 visits
Coito.64 - 54 visits
I-Worm.Mapson. - 48 visits
Win16.Klon.1177 - 42 visits
Win32.Hidra - 42 visits
Marine.500 - 35 visits
Random Viruses Pages:
Rest.158
BAT.DebugVir.78
Gippo.90
Epa.86
Macro.Word.Ramse
Win32.HLLW.Dervis
ReedCat.92
Macro.Word.Helper.
Ifor.142
Macro.Excel97.Riot
|
|
